Applications
Application Admins & Business Owners
Applications
Application Admins & Business Owners
Each application can have exactly one Business Owner and one or more Application Admins. This guide explains the differences between these roles, their responsibilities, and how to assign them efficiently.
Overview of Roles
- Exactly one per application.
- Responsible for spend management, can be assigned as a dedicated approver for approval policies, and can serve as a reviewer for access reviews.
- Typically someone like a team lead who oversees budget and approvals rather than day-to-day operations.
- If no Admin is assigned, the Owner automatically handles admin tasks (provisioning, deprovisioning).
- Exactly one per application.
- Responsible for spend management, can be assigned as a dedicated approver for approval policies, and can serve as a reviewer for access reviews.
- Typically someone like a team lead who oversees budget and approvals rather than day-to-day operations.
- If no Admin is assigned, the Owner automatically handles admin tasks (provisioning, deprovisioning).
- One or more per application, ideally at least two for redundancy.
- Responsible for operational tasks such as provisioning and deprovisioning users (if auto-provisioning is not enabled, they’ll receive these requests).
- Can also be assigned to approval workflows, if needed.
- Not every actual admin of the application must be assigned in AccessOwl — only those who will actively handle provisioning tasks in AccessOwl.
Assigning Roles (Owner or Admin)
- Open the Application: In your AccessOwl dashboard, navigate to the application you want to manage.
- Assign Individuals:
- Select Business Owner: You can only choose one person.
- Select Application Admin(s): You can assign multiple people here.
If no Admin is assigned, the Owner automatically takes on the admin responsibilities.
You can also select multiple apps from the Applications overview and assign roles in bulk.
Handling Role Changes
- Owner Leaves: AccessOwl will assign the oldest existing AccessOwl Org Admin as a new Owner of the application and notify them.
- Admin Leaves: If no other admin exists the current Owner will start to receive provisioning and deprovisioning requests until new admins are added
FAQ
Was this page helpful?